SQL Injection Pattern (Basic) Regex Pattern

Live Regex Tester

Pattern Breakdown

Code Examples

const regex = /(?:'\s*(?:OR|AND)\s+.*=.*|;\s*(?:DROP|DELETE|UPDATE|INSERT)\s|UNION\s+SELECT|--\s*$)/i;
const test = "' OR 1=1 --";
console.log(regex.test(test)); // true

// Extract matches
const matches = test.match(regex);
console.log(matches);

import re

pattern = r'(?:'\s*(?:OR|AND)\s+.*=.*|;\s*(?:DROP|DELETE|UPDATE|INSERT)\s|UNION\s+SELECT|--\s*$)'
test = "' OR 1=1 --"
match = re.search(pattern, test, re.IGNORECASE)
print(match)  # Found!

package main

import (
    "fmt"
    "regexp"
)

func main() {
    re := regexp.MustCompile(`(?:'\s*(?:OR|AND)\s+.*=.*|;\s*(?:DROP|DELETE|UPDATE|INSERT)\s|UNION\s+SELECT|--\s*$)`)
    fmt.Println(re.MatchString("' OR 1=1 --")) // true
}

Common Use Cases

Match Examples

About the SQL Injection Pattern (Basic) Regex

Detects common SQL injection attack patterns including OR-based, UNION, and command injection.

Regular expressions (regex) are powerful pattern matching tools used across virtually all programming languages. The sql injection pattern (basic) pattern is classified as advanced difficulty in the security category. This pattern is specifically designed for SQL.

When using this regex, always consider edge cases and test thoroughly with real-world data. Use the interactive tester above to validate the pattern against your specific inputs before deploying to production.